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0 Forged signatures are discriminated from au- 
thentic signatures in a verification process which 
relies on dynamic signature properties. In an initial- 
ization phase (010) a retarence set of authentic sig- 
natures iis obtained. A set of dynamical properties 
(140.1, 140.2, 140,3) of the reference signatures is 
computed numerically- The most characteristic sub- 
set of such properties is selected and statistically 
analyzed to obtain a set of parameters for signature 
verification. An entrant signature is subsequently ac- 
cepted or rejected (160. 170) based on its confor- 
mity to the parameters. An accepted signature is 
optionally passed along to a higher-level verification 
process. When a signature is accepted by the 
highest-level verification process, responsive means 
(050) are activated, resulting in the entrant's access 
to a system. 
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Fletd of the Invention 

This Invention relates to the field ot pattern 
recognition, and mars specifically, to the verifica- 
tion of handwritten, hunnan signatures. 

Art Background 

The aatomatic verification of a signature is a 
useful way to identify a human being for purposes, 
e.g., of establishing his authority to complete an 
auiomated transaction, or gain control of a com- 
putcr» or gain physical entry to a protected area. 
Signatures are particularly useful for identification 
because each person's signature is highly unique, 
espedally if the dynamic propertiee of the signa- 
ture are considered in addition to the shape of the 
signature. Even if a skilled forger can accurately 
reproduce the shape of a signature, it is unlikely 
that he can reproduce the dynamic properties as 
well. 

Numerous practitioners have addressed the 
problem of signature verification. Some practition- 
ers have concentrated on analysis of the static 
shapes embodied in signatures, whereas other 
practitioners have concentrated on analysis of dy- 
namic properties. For example, a verification meth- 
od that involves analyzing the dynamic proi>ertie5 
of signatures is described in U.S. Patent No. 
4,901,358, issued to L Bechet on February 13. 
199D. That patent discloses a verification method 
based on the x and y speed signals of the signa- 
ture. Each speed signal Is broken into standard- 
ized, short segments, and each segment Is com- 
pared with a con'esponding segment of a pre- 
viously obtained reference signature. In a contrast- 
. ing approach, U.S. Patent No. 4.024.500, issued to 
N.M. Herbst, et ah on May 17, 1977, discloses the 
use of the speed signal to separate the signature 
into segments, followed by shape analysis of the 
segments. A third approach is described in our 
European patent application No." 92304115.6. In 
that approach, a model signature is used as a 
reference for shape analysis. The model signature 
is constructed by affine invariant averaging of refer- 
ence signature segments. In a speed-based seg- 
mentation method, each signature to be segmented 
is compared to a selected reference signature 
through the use of dynamic time warping. 

However, when a person's (hereafter, an 
^•entrant's") signature is verified aocording to one 
of the above-described methods, It is compared, 
segment-by-segment, to a reference signature. As 
a consequence, such methods require a relatively 
large amount ot information about the reference 
signature to be stored. This requirement is disad- 
vantageous in applications where the relevant refer- 
ence infonnation is to be stored at a remote loca- 



tion where only limited storage means are avail- 
able. For such applications, it Is desirable to char- 
acterize the entrant's signature by a set of numeri- 
cal parameters which, although relatively small, still 
5 identifies that person*£ signature with a high degree 
of confidence. 

Moreover, such a parameter-based technique, 
even if It fails to provide an acceptable confidence 
level, is useful In combination with more complex 
10 techniques (based, e.g., on pattern-matching) which 
offer greater confidence at the cost of greater delay 
or greater information storage requirements. In 
such a combination, the paramoter-based tech- 
nique is useful as a coarse sieve lor rejecting gross 
76 forgeries or anomalous signatures, without the 
need to invoke the more complex technique. 

A signature verification technique based on nu- 
merical parameters has, in fact, been described. 
U.S. Patent No. 3,699,517, Issued to James W. 
20 Dyche on October 17. 1972. describes a techrilque 
in which sixteen components of a real-time signa- 
ture vector are compared to the corresponding 
mean values computed on a reference set of pre- 
viously obtained sample signatures. If a sufficient 
25 number of the components fall within a predeter- 
mined range of the respective mean values, the 
signature is accepted. 

Although such a technique may ofier advanta- 
geously low storage requirements and rapid pro- 
30 cessing, it Is still relatively inefficient, in that re- 
gard, we have found that a given entrant's signa- 
tures can be dependably verified on the basis of 
fewer than sixteen parameters, particularly when 
the specific selection of parameters is adaptable to 
55 the idiosyncrasies of a given entrants's handwriting. 
Hitherto, practitioners have failed to provide such 
flexibility, and have consequently failed to provide 
a parameter-based signature verification method 
having extremely high efficiency. 

40 

Summary of the Invention 

In one aspect* the invention involves a method 
for controlling access to a system of the kind in 

45 Which access is based on signature verification. 
The invention is typically practiced In a commu- 
nications network, for example, a plurality of bank 
branches, each communicating with a central office 
via telephone lines, or a plurality of wortcstations 

€0 intercommunicating via a local area network. 

In preferred embodiments, an entrant submits 
sample signatures via digitizing means which facili- 
tate the storage of the sample signatures in digital 
form. In an Initializing phase, each entrant digitally 

ss records a set of at least' two authorized sample 
signatures, here referred to as the "reference set," 
using the digitizing means. In a later, verification 
phase, a person (claiming to be an authorized 
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emrant having earlier recorded sample signatures) 
again digitally records a signature, here referred to 
as an "entrant signature.** The verification process 
involves the calculation of one or more error val- 
ues, hereafter referred to as "entrant errors", which 
represent the degree to which the entrant signature 
differs from the authorized sample signatures. If the 
entrant error is less than (or, alternatively, less than 
or equal to) a certain threshold, responsive means 
are activated, e.g.. an electric circuit or logical 
operation is activated, such that the entrant is given 
access to the system. If the requirement is not 
satisfied, the entrant may. optionally, be invited to 
submit one or more additional entrant signatures 
for verification. 

In the initializing phase of the prefen^ed em- 
bodiment, the sample signatures are digitally pro- 
cessed, resulting in a set of at least four calculated 
values which are characteristic of the sample sig- 
natures and represent a certain group of spatial 
and dynamic properties, here refen'ed to as 
"measures," of the sample signatures. A number, 
representing the average or most typical such val- 
ue over the sat of reference signatures, is cah 
culsted. Such a number Is hereafter refen^d to as 
an "average". The cun-ently preferred such aver- 
age is the statistical mean. A number Is also cal- 
culated, which represents the variability of the mea- 
sure over the set of reference signatures. Such a 
number is hereafter referred to as a "deviatiori". 
The currently pretended such deviation is the statis- 
tical standard deviation. Significantly, and in con- 
trast to tiie prior art, a subset consisting of the at 
least three measures having the smallest deviations 
over the set of reference signatures is selected for 
subsequent use in the verification phase. 

As part of the initializing phase of the preferred 
embodiment, the threshold is calculated on the 
basis of information derived from the reference 
signatures. For each reference signature, each of 
the selected measures, evaluated for that signature, 
is compared to the corresponding average over the 
reference set. Such comparison leads to a set of 
calculated en-ors. one for each reference signature, 
with respect to ti^e reference set. The threshold Is 
determined on the basis of those ©n'ors, which are 
hereafter refen^ed to as "reference en*ors". 

The verification phase includes one or more 
stages, typically including a parameter-fnatchlng 
stage. In that stage, at least one entrant signature 
is digitally processed to evaluate the selected mea- 
sures witii respect to that signature. The entrant 
error Is calculated by comparing these measure 
values to the corresponding mean reference val- 
ues. 

Brief Description of the Drawings 



FIQ. 1 Is a flowchart desaibing. in schematic 
fashion, the steps according to one embodiment of 
the inventive method. 

FIQ. 2 is a flowchart describing, in schematic 
5 fashion, an exemplary sequence of steps leading to 
the determination of a threshold useful in connec- 
tion with the inventive meti^od for rejecting forged 
signatures. 

FIGS. 3 6 are bar graphs illustrating the 
70 ability of the Invention to discriminate authentic 
signatures from forgeries. 

Detailed Description of a Preferred Embodi- 
ment 

IS 

A system is provided, which is capable of 
offering access to, or withholding access from, a 
human being, here referred to as an "entrant". As 
noted, above, access is contingent upon successful 
20 verification of ttie entrant's signature. 

If. for example^ the system is an automated 
bank teller machine, such access is the ability of 
the entrant to conduct a banking transaction using 
the system. Access is exemplarily provided by 
25 activating an electric circuit which controls the sys- 
tem such that it can conduct a transaction, (Such 
activation of an electic circuit may, e.g., comprise 
setting a digitally stored value, or "flag," in a digital 
memory.) Other fomns of "access" that may be 
30 provided by activating an electric circuit will be 
readily apparent, and include, e.g., deactivation of a 
physical locking mechanism, or setting a digitally 
stored value such that a computer or computer 
tenninal will subsequentiy respond to the entrant's 
36 commands. 

exemplary digitizing means comprise a 
capacitance-sensing, transductive tablet which 
senses the position (I.e.. the horizontal, or x coordi- 
nate and the vertical, or y coordinate) of the tip of a 
40 stylus, and transmits that information to a digital 
storage device (e.g., a digital computer). Prefer- 
ably, such means are also capable of sensing, and 
transmitting data representing, the stylus pressure 
(exemplarily by means of a pressure transducer in 
45 the stylus). One suitable stylus-tablet inputting ap- 
paratus is described in co-pending U.S. patent ap- 
plication Serial No. 635.086, filed on Febmary 28. 
1990. 

When a user is establishing his authorization as 
50 an entrant, he enters a reference set of at least two 
sample signatures, (The total number of signatures 
In the reference set is denoted by the positive 
Integer n.) In fact, It is desirable tor him to enter at 
least 5 signatures, and even as many as 10 or 
55 more. Each signature Is recorded as a sequence of 
x-y coordinate pairs recorded at a uniform fre- 
quency of. e.Qn about 300 points per second. 
Along with the spatial coordinates, a third coordi- 
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nate, pressure p. Is optionally recorded at the same 
time points. 

Although the recorded daia are typically 
smooth, there are occasional gross outliers and 
noisy points which need to be removed (typlcaliy. 
less than l% ot the total). These are easily iden- 
tified by their large Euclidean distance from the 
neighboring points. 

According to a currently prefenred embodiment, 
a smooth path is then constructed through the 
remaining x and y coordinates for each word in 
each signature. This Is preferably done by smooth- 
ing each coordinate separately against time using a 
cubic smoothing spline. 

In a currently preferred embodiment, the 
amount of smoothing is chosen automatically by 
global cross-validation of the integrated Euclidean 
distance between the observed and fitted points. 
Typically very little smoothing is perfomied, and 
the fitted curves usually come close to interpolating 
the observed sequences. There are three reasons 
for smoothing the signature sequences in this way: 
(1) even though the amount of smoothing Is small, 
it tends to eliminate small discontinuities intro- 
duced by measurement error due to ttie discretiza- 
tion during the recording process, or small move- 
ments during the signing: (2) the cubic spline re- 
presentation turns the sequence into a function that 
can be evaluated at any point t (this is convenient 
for purposes of subsequent steps); and (3) the 
cubic spline has two continuous derivatives, the 
first of which is used in the speed computation. 
If the observed signature sequence is denoted 

by 

X|, 1 = 1 N 

measured at time points ti, then the smoothed 
signature S(t) minimises the criterion 



LllXi - s(ii)ii^ + xjiis./(i)|pdi 



over a suitable Sobolev space of functions, and for 
some value of the smoothing parameter X. The 
solution varies dramatically with the value of the 
smoothing parameter, which has to be supplied. U 
is desirable to use the cross-validated integrated 
Euclidean squared distance 

cva) = iiXi - sh)(ti)i^ 



is the value of the smooth curve evaluated at ti; the 
6 subscript (i) indicates that the i-th point itself was 
omitted in the fitting of the- curve. This criterion is 
desirable because it recognizes the signal in the 
signature, and selects a value for X such that only 
enough smoothing Is performed to eliminate the 
to small amount of measurement en'or. 

A time-dependent speed signal is calculated 
for each of the n smoothed sample signatures. It 
should be noted in this regard that appropriate 
speed signals are generated by the exemplary 
Tfi smoothing method. 

Each of the smoothed signatures may be char- 
acterized by a group of at least four measures 
which are readily calculable from the smoothed 
signature. Each measure is a well^iefined math- 
20 ematical property of a sampled signature which is 
potentially useful for identifying the writer of that 
signature because it varies relatively little between 
signatures made by the same writer. Such a mea- 
sure represents spatial and/or dynamic properties' 
25 of the signature. It should be noted, however, that 
although a group of relatively invariant measures 
can generally be found for any given writer, the 
same group generally will not work for other writ- 
ers. Instead, different writers generally have dif- 
30 ferent (relatively) invariant measures. From the in- 
dividual measures, averages and deviations, as dis- 
cussed above, are readily calculated as parameters 
which characterize the reference set as a whole. 
One measure is simply the total path length L 
35 of the signature (optionally scaled by the horizontal 
v^dth of the signature), which is readily calculable 
from the stored array conresponding to the sam- 
pled (and smoothed) signature. Another measure is 
the total duration T of the signature, which is cal- 
40 culable as the number of points sampled during the 
recording of the signature* divided by the sampling 
rate. Various other measures are readily calculated 
from the horizontal speed signal Vx, the vertical 
speed signal Vy, the horizontal acceleration signal 
45 Bx. and the vertical acceleration signal a^ These 
quantities are defined, respectively, as the first 
derivatives, with respect to time, of horizontal and 
vertical position, and the second derivatives, with 
respect to time, of horizontal and vertical position, 
so AS noted, Vx and vy are calculated by the cun^ently 
preferred smoothing algorithm. The acceleration 
signals a^ and ay are also readily calculated by well 
known numerical techniques. 

The path velocity magnitude (speed) v is ex- 
ss pressed in terms of the horizontal and vertical 
speeds by: 



as a criterion for selecting X. Her© 
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V = (vl + v^)^ 

The tangential accelBfation at is expressed in terms 
of th© horizontal and vertical speeds and accelera- 
tions by: 

ai = (VkS^ + Vyay)/v . 

The centripetal acceleration q^, car\ expressed 
as: 

ac = (v^ay ■ VyaxVv . 

The magnitude a of the total acceleration is given 
by: 



The time derivative i of acceleration, otten re- 
ferred to as "jerk." is also useful in this regard, 
i-etting jx and jy represent, respectively, the time 
derivatives' of a« and ay . i may be expressed by 

j = (ajjx + ayjyVa . 

Each of the quantities v. ac. a,, a, and j is 
readily calculated as a function of time. Using well 
known numerical techniques, the rms value of each 
of these functions over the sampled (and 
smoothed) curve is readily calculated Such cal- 
culations provide, respectively, the folbwing mea- 
sures: the rms speed V, the rms centripetal accel- 
eration Aa. the rms tangential acceleration At, the 
rms total acceleration A, and the rms jeri< J, Addi- 
tionally, the mean value of Vx is readily calculated, 
providing, 'as a measure, the average horizontal 
speed Additionally, well known numerical tech- 
niques are readily used to integrate Sc over the 
curve, providing, as a measure, the integral,^ with 
respect to time, of the magnitude of the centripetal 
acceleration. lAc. The above-described measures 
have been found to be useful, in practice. However, 
this list is not exhaustive. Instead, many other 
potentially useful measures will be apparent to the 
skilled practitioner. 

In the inltiaiizlng phase, a grt)up of measures, 
exemplariiy the nine measures described above, Is 
calculated. It should be noted in this regard that the 
two main aspects of signature data, namely, shape 
and dynamics, have somewhat complementary 
■ roles in distinguishing valid signatures from forger- 
ies. That is, the harder a forger tries to copy every 
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detail of a signature's shape, the less likely he is to 
match its dynBmics, and vice versa. Therefore the 
parameter-matching stage should include mea- 
sures which tend to differentiate between shape 
s and dynamics, so that if one aspect is matched, 
the other Is mismatched. We have found that for 
the purpose of differentiating between shape and 
dynamics, a particularly useful group of measures 
are those relating to (i.e.. representing, or derived 
70 from) path-tangential and path-nomnal properties of 
' the motion of the stylus tip. Such measures include 
V, Ac, At. A, J. and lAc. described above. Accord- 
ingly, the initializing phase preferably includes cal- 
culating at least one such measure. 
16 As noted, an important limitation on the mea- 
sures used is that their variability should be small 
over the reference set of signatures, in order to 
reduce the likelihood of false rejection of valid 
signatures. Since each signature has its own char- 
so acteristics, which slowly vary over time, measures 
are preferably chosen according to each individ- 
ual's reference set of signatures, and that choice 
preferably evolves as the reference set changes 
over time. 

25 According to a cun-ently prefen'ed embodiment, 
th© nine measures described above are evaluated 
for each signature in tjie entrant's reference set. A 
subset of the nine measures, comprising those 
measures having the smallest standard deviations 

00 (whan each is normalized to the corresponding 
mean) is selected as the measure space for that 
entrant. Preferably, at least three measures are 
selected. 

With regand to the verification phase, suppose 
35 an entrant signature is submitted by entrant i. Let 
My be the value of the j-th measure in the subset of 
Ni measures selected tor entrant 1. (It should be 
■ noted that In general, not all of the measures that 
were evaluated for the reference signatures will be 
40 selected for .use in the verification phase. Instead, a 
subset will be selected, including.. e.g., only those 
measures displaying the smallest standard devi- 
ation over the reference set,) Also, let and cij 
denote the mean and standard deviation, respec- 
4$ tively. of My over the current reference set. Th© 
magnitude. of the error vector in this measure 
space for subject i is usefully defined as 

50 Ei = I 2:((Mij-^^)/aij)^ ]^ . 

According to a cun*entJy preferred screening test, a 
65 cutoff threshold Is determined from the refer- 
ence set of entrant i. If E| is less than Ci (or 
alternatively, !es$ than or equa! to C|). the entrant 
signature Is accepted. Otherwise, the signature is 
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rejected. 

In typical applications, the objective of this 
screening procedure will be to quickiy reject crude 
forgeries or errors in signing, but accepti for 
second-siage testing, signatures which may be ei- 
ther valid signatures or skillful forgeries, Accord- 
ingly, the error threshold should lie far enough 
above the largest error In the reference sei to 
insure a very low false rejection rate. 

According to the currently preferred embodi- 
ment, duhng the intiaiizing phase, the error E| is 
calculated for each of the reference signatures, 
treating that signature as though it were an entrant 
signature. The greatest of the errors calculated in 
that way (i.e., the reference errors) is the yardstick 
for establishing the cutoff threshold C,. That is, C, is 
set to be equal to the greatest reference enror, or it 
Is set to some incrementally higher value, such as 
10% above the greatest reference error. 

it should be noted in this regard that during the 
Initializing phase, well-known statistical methods 
can be used for recognizing reference signatures 
having anomalous errors. Such anomalies might 
arise, for example, from non-reproduceable erors 
in the entrant's penmar^hip. Such anomalous sig- 
natures are optionally eliminated from the reference 
set. 

The foregoing discussion is summarized in 
FIG, 1. Means 100 are provided for Inputting a 
reference set of signatures, during the initializing 
phase 010, to digital conversion and storage means 
110, which exemplarily comprise a digital central 
processing unit. Analogous (and. for at least some 
applications, identical) inputting means 120 and 
conversion and storage means 130 are provided for 
the entry and storage of at least one entrant signa- 
ture In the verification phase 020. Data represent- 
ing the reference set of signatures are processed 
to obtain a set of dynamical parameters, typically 
the mean and standard deviation over the refe^ 
ence set of each of a set of measures. For illustra- 
tive purposes, three such measures, 140.1, 140.2. 
140.3, are represented in the figure. The verifica- 
tion phase includes a parameter-matching stage 
030 and one or more optional second (and higher) 
stages 040. in the parameter-matching stage, the 
stored, digitized entrant signature is subjected to 
digital processing 150, resulting, in the example of 
the figure, in computed values Mn. M|2, and M13. 
corre^onding, respectively, to measures 140.1 • 
140.3. Significantly, only selected measures are 
evaluated In this stage. As noted, the index i iden- 
tifies the entrant whose signature Is being verified, 
and the index J her© Identifies one of the selected 
measures. In processing step 160, an error Is cal- 
culated from the parameter values and the 
values. In processing step 170, the error is com- 
pared to a threshold value, the error exceeds the 
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threshold* the signature is rejected. At this point, a 
new submission of an entrant signature may be 
requested, or the transaction with the entrant may 
simply be terminated. If the signature is accepted. 
5 and if there is only one verification stage, electric 
circuit 050 is activated, making access to a system 
available to the entrant (For purely illustrative pur- 
poses, such activation is depicted in the figure as 
activation of a relay.) tf. as depicted in the figure, 
to the verification phase has b second stage, the 
stored signature data are subjected to a second 
stage verification process 180 resulting,. as before, 
in either rejection, or acceptance and granting of 
access, or acceptance and invocation of a still 
J6 higher verttication stage. 

Significantly, in the parameter-matching stage 
030, the entrant signature is compared against a 
relatively smalt amount of data relating to the refer- 
ence set. Such data consist of the identities of the 
20 selected measures, the means (or ether averages) 
and standard deviations (or other deviations) of 
those measures over the reference sat, and the 
threshold value. As part of the Initialising phase, 
those data are conveniently digitally stored at a site 
25 which is local relative to the entrant. Such a site is, 
e.g.. associated with a computer terminal or auto- 
matic teller machine through which the entrant con- 
ducts transactions with the access-controlled sys- 
tem. A particularly convenient location for such 
so storage is a small, portable object such as a credit 
card equipped with a digital data storage medium 
(e.g.. magnetic storage or a solid state microchip 
memory device) end carried by the entrant 

Accordingly, an embodiment of the invention is 
35 readily envisioned in which the initializing phase 
Includes local storage of data, as described. In a 
subsequent, parameter-matching stage, the data 
are entered Into the access-controlled system from 
the local data storage medium. 

40 

Example 

The initial database obtained for this study 
included reference sets, of 10 signatures each, 

4s belonging to the four human subjects identified as 
EP, FS, SG. and WN. Forgeries were also obtained 
as follows: of the signature of subject EP, 10 forg- 
eries; of FS, 9; of SG, 4; and of WN. 10. The four 
forgers were volunteers who were shown samples 

so of the signature they were to imitate, and allowed 
to practice (generally 5-10 minutes) until they felt 
ready to produce the forgery samples. Each forger 
imitated the signature of one of the four subjects. 
The nine measures described above were eval- 

55 uated on each reference set, and the mean and 
standard deviation of each measure within each set 
were computed. 

h should be noted that to make the parameter- 
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matching procedure automatic, a set of rules Is 
needed tor selecting the number Nj and sei {Mi]} 
of measures to use in computing the error mag- 
nitude Ei for subject i. and for estalslishing the 
proper threshold Q to obtain the desired low level 
of false reiections. 

With reference to FIG. 2. an exemplary proce- 
dure was established as follows: For each subject, 
the nine measures were rank ordered (step 200 of 
the figure) according to the standard deviation o1 
each measure (normalized to the corresponding 
mean) over that subject's reference set. The refer- 
ence error was then repeatedly computed for each 
signature in the reference set, using successively 
larger subsets of the nine rank-ordered measures, 
tt was observed that subsets of the best three 
measures would offer only slightly better discrimi- 
nation between valid and forged signatures than 
would subsets of the best two measures. Subsets 
of four measures would offer substantially better 
discrimination. However, when more than four mea- 
sures were considered, the variability over the ref- 
erence set was obsen/ed to increase. Therefore, on 
the basis of the e)cisting data, the four top-ranked 
measures were chosen (Step 210). The largest 
reference error was computed (Step 220). and the 
threshold value Q was arbitrarily set at a value 
10% greater than that value (Step 230 of FIGS. 1 
and 2). This value Is readily adjusted in accordance 
with false rejection statistics in a given population. 

The parameter-matching procedure was ap- 
plied to the valid and forged signatures of subjects 
SG. FS. WN. and EP. using the four best measures 
for each in the computation of the entrant errors. 
The results, displayed in FIGS. 3 - 6. show the 
magnitude of error for the 10 valid signatures in the 
left group of bars and the forgeries in the right 
group of each plot The dotted line is the value of 
C( for each subject. The four measures chosen for 
each subject are also listed In each plot 

It is apparent from the figures that the FS (FIG. 
4) and SG (FIG. 3) forgeries could be readily 
discriminated from the valid signature reference 
set. The WN (FIG. 5) forgeries were detectable. 
However, the WN reference set displayed enough 
variability to suggest that the threshold should be 
set higher than the adopted 10% margin, in ortier 
to reduce false rejections. Such a change, however, 
would be liable to result in the acceptance, as 
valid, of forgeries only slightly better than those 
that were made. The EP (FIG. 6) forgeries were 
quite skillfully matched to the statistics of the mea- 
sures used, and only 4 out of 10 were rejected. (It 
should be noted that a second-stage verification 
procedure involving more deialled shape analysis 
would be likely to succeed in rejecting such forger- 
ies as survive the parameter-matching procedure.) 
Significantly, the second signature in the EP reifer- 



ence set had a substantially larger error than the 
other nine. If that signature were removed from the 
reference set. the threshold would be lowered to a 
level where only one of the forgeries would be 
5 accepted as valid. 

Cleims 

1, In a communications network, a method for 
70 controlling access to a systern such that when 

an entrant signature is accepted, responsive 
means are activated, with the result that ac- 
cess to the system becomes available* the 
melhod comprising: 
Ts A) in an initializing phase. 

a) receiving from input means, and 
digitally recording, a reference set which 
consists of a multiplicity of reference sig- 
natures; and 

20 b) calculating, for each of at least four 

predetermined spatial and/or dynamic 
signature properties, to be referred to as 
''measures**, an average and a deviation 
of that measure over the reference set; 
25 and 

B) in a verification phase, at least a first 
verification stage comprising the steps of: 

c) receiving from Input means, and 
digitally recording, at least one entrant 

30 signature; 

d) evaluating at least some of the mea- 
sures on the entrant signature; 

e) calculating an entrant error associated 
with the entrant signature, the entrant 

36 enror representing a mismatch between 

at least some of the measures as evalu- 
ated on the entrant signature and the 
same measures as averaged over the 
reference set; and 

40 f) comparing the entrant error to a 

threshold value such that the entrant sig- 
nature is accepted if the entrant error is 
ie$s than, or less than or equal to, the 
threshold value. CHARACTERIZED IN 

45 THAT 

C) the initializing phase further comprises 
the steps of: 

(g) after step (b), selecting the at least 
three measures having the smallest de- 

50 viations over the reference set; 

h) calculating a reference error associ- 
ated with each reference signature, each 
reference error representing a mismatch 
between the selected measures as evalu- 

55 ated on that reference signature and the 

same measures as averaged over the 
reference set: and 

i) determining the threshold value based 
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on the reference errors; and 
D) the envant error of step (e) is calculated 
with respect 'to the selected at least three 
measures. 

U The method of claim l, wherein step (b) com- 
prises calculating at least one measure se- 
lected from the group consisting of: the total 
signature length, the total signature duration, 
the rms speed," the rms centripetal accelera- 
tion, the rms tangential acceleration, the rms 
total acceleration, the mns jerk, the mean value 
of the horizontal speed, and the integral with 
respect to time of the magnitude of th© cen- 
tripetal acceleration. 

3. The method of claim 1» wherein step (b) com- 
prises calculating at least one measure which 
represents, or is derived from, a path-normal 
or path-tangential property of the reference 
signatures. 

4. The method of claim 1. wherein the average of 
each measure over the reference set is the 
statistical mean of that measure over the refer- 
ence set. and the deviation of each measure 
over the ^ reference set is the standard de- 
viation. 

5. The method of claim 4. wherein; 

a) the step of calculating entrant en-or com- 
prises evaluating the expression 



TO 



6. 



IB 



20 



25 



50 



35 



where E| denotes the i-th entrant en-or, My 
denotes the j-th one of the selected mea- 
sures evaluated for the I-th entrant signa- 
ture. Ni denotes the total number of mea- 
sures selected for the i-th entrant* de- 
notes the mean of the j-th measure over the 
i-th reference set. denotes the standard 
deviation of the j-th measure over the i-th 
reference set. and the summation is carried 
out over the selected measures; and 
b) the step of calculating reference errors 
comprises treating each reference signa- 
ture. In turn, like an entrant signature and 
calculating the corresponding entrant error. 

The method of claim 5, wherein the step of 
determining the threshold value comprises 
identifying the largest reference error, and se- 
lecting a threshold value which Is greater than 



40 



S5 



or equal to the largest reference error. 

The method of claim 1 . wherein; 

a) the Initializing phase further comprises 
digitally storing, on a storage medium that 
Is local with respect to at least one . entrant, 
data which comprise*, the identities of the 
selected measures, the averages and de- 
viations of the selected measures over the 
reference set, and the threshold value; and 

b) the first verification stage further com- 
prises reading the locally stored data. 

The method of claim 1. wherein step (b) com- 
prises calculating averages and deviations of at 
least five measures, and step (g) comprises 
selecting exactly four measures. 

In a communications network, an access-con- 
trolled system which includes responsive 
means that are activated when an entrant sig- 
nature is accepted, with the result that access 
to the system is made available, the system 
further comprising: 

a) means for receiving and digitally record- 
ing data which represent a reference set 
consisting of a multiplicity of reference sig- 
natures, and for subsequently receiving and 
digitally recording data which represent at 
least one entrant signature; 

b) digital processing means for ev^ueting. 
on each of the reference signatures and the 
entrant signature, at least four predeter- 
mined spatial and/or dynamic properties, to 
be referred to as "measures"; 

c) digital processing means for calculating 
an average and a deviation of each measure 
over the reference sat; 

d) digital processing means for calculating 
an entrgint error associated with the entrant 
signature, the entrant error representing a 
mismatch between at least some of the 
measures as evaluated on the entrant signa- 
ture and the same measures as averaged 
over the reference set; and 

e) digital processing means for comparing 
the entrant error to a threshold value such 
that the entrant signature is accepted if the 
entrant en-or is less than, or Ibs$ than or 
equal ro, the threshold value, CHARAC- 
TERIZED IN THAT 

f) the system further comprises digital pro- 
cessing means for selecting the at least 
three measures having the smallest devi- 
ations over the reference set; 

g) the entrant-error calculating means are 
adapted to calculate the entrant error with 
respect to the selected at least three mea- 
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sures; 

h) tti© system further comprises digital pro- 
cessing means for calculatlr^g a reference 
error associated with each reference signa- 
ture, each reference error representing a 5 
mismatch between the selected measures 

as evaluated on that reference signature 
and the same measures as averaged over 
the reference set; and 

i) the system further comprises digital pro- io 
cessing means for determining the thresh- 
old vaiue based on the reference errors. 

10. The system of claim 9, wherein for the i-th 

entrant and the J-th measure, the average mea- 75 
sure is the statistical mean, denoted Ug. of that 
measure over the reference set; the deviation 
is the standard deviation, denoted oy, of that 
measure over the reference set; and the 
means lor calculating entrant error and refer- 2Q 
finrn errni romprise means for evaluating the 
PiKprftssinn 



2 



25 



where N, denotes the total number of mea- 30 
sures selected for the i-th entrant; the summa- 
tion is carried out over the selected measures; 
if entrant error Is being caicalated, E| denotes 
the entrant error and denotes the j-th one 
of the selected measures evaluated over an $s 
entrant signature of the i-th entrant; and If 
reference error is being calculated. E] denotes 
the reference error and is calculated for each 
reference signature as tf that signature were an 
entrant signature. ^ 

11. The system of claim 10. wherein the threshold- 
determining means comprise means for iden- 
tifying the largest reference error and for se- 
lecting a threshold value which Is greater than 45 
or equal to the largest reference error. 

12. The system of claim 9. further comprising: 

a) means for digitally storing, on a storage 
medium that is local with respect to at least 
one entrant, data which comprise: the iden- 
tities of the selected measures, the aver- 
ages and deviations of the selected mea- 
sures over the reference set. and the 
threshold value; and 5s 

b) means for reading the locally stored data. 

13. In a communications network, a method for 



50 



controlling access to a system such that when 
an entrant signature Is accepted, responsive 
means are activated, with the result that ac- 
cess to the system becomes available, the 
method comprising: 

a) receiving from input means, and digitally 
recording, at least one entrant signature; 

b) evaluating, on the entrant signature* at 
least three spatial and/or dynamic proper- 
ties, to be referred to as "measures", the at 
least three measures constituting a measure 
set' 

c) reading reference data from a digital stor- 
age medium that is local with respect to at 
least one entrant, the reference data includ- 
ing the mean and deviation of each mea- 
sure as evaluated over a reference set 
which comprises a muftiplicity of reference 
signatures; 

d) comparing the entrant signature to the 
reference data by a process that comprises 
calculating at least one entrant enror, the 
entrant error representing a mismatch be- 
tween the measures as evaluated- on the 
entrant signature and the same measures 
aa averaged over the reference set: and 

e) comparing the entrant error to a thresli- 
old value such that the entrant signature is 
accepted if the entrant en-or is less then, or 
iess than or equal to, the threshold value. 
CHAFIACTERIZED IN THAT 

f) the threshold value is based on at least 
one reference error, each reference error 
being defined as a mismatch between the 
measures, as evaluated on one of the refer- 
ence signatures, and the same measures as 
averaged over the reference set; 

' g) the measure set Is a proper subset of a 
measure superset which contains at least 
four measures, the measure set consisting 
of the at least three measures, selected 
from the superset which have the smallest 
deviations over the set of reference signa- 
tures; and 

h) the reference data further include the 
threshold value, and further include informa- 
tion which identifies the selected at least 
three measures. 

14. tn a communications networK. an access-con- 
trolled system which includes responsive 
means that are activated when an entrant sig- 
nature Is accepted, with the result that access 
to the system is made available, the system 
further comprising: 

a) means for receiving from Input means, 
. and digitally recording, at least one entrant 

signature; 
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b) digital processing msans for evaluating, 
on the entrant signsture, at least three spa- 
tial end/or dynamic properties, to be re- 
ferred to as "measures', the at least throe 
measures constituting a measure set; s 

c) means for reading reference data from a 
digital storage medium that is local with 
respect to at least one entrant, the refer- 
ence date including the mean and deviation 

of each measure as evaluated over a refer- id 
ence set which comprises a multiplicity of 
reference signatures; 

d) digital processing means for comparing 
the entrant signature to the reterence data 

by a process that comprises calculating at is 
least one entrant error, the entrant error 
representing a mismatch between the mea- 
sures as evaluated on the entrant signature 
and the same measures as evaluated over 
the reference set; and 20 

e) digital processing means for comparing 
the entrant en-or to a threshold value such 
that the entrant signature is accepted If the 
entrant error Is /ess than, or /ess than or 
equal to. the threshold value, and for ac- 25 
tivating the responsive means if the entrant 
signature is accepted* CHARACTERIZED IN 
THAT 

f) the threshold value Is based on at least 
one reference error, each reference error 
being defined as a mismatch between the 
measures, as calculated on one of the refer- 
ence signatures, and the same measures as 
averaged over the reference set 

g) the measure set is a proper subset of a 35 
measure superset which contains at least 
four measures, the measure set consisting 

of the at least three measures, selected 
from the superset, which have the smallest 
deviations over the set of reference signa- 40 
tures; and 

h) the reference data further include the 
threshold value, and still further include in- 
formation which identifies the selected at 
least three measures. 
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® Method and apparatus for controlling a system, using signature verification. 

0 Forged signatures are discriminated from au- 
thentic signatures In a verification process which 
relies on dynamic signature properties. In an initial- 
ization phase (010) a reference set of authentic sig- 
natures is obtained. A set of dynamical properties 
(140.1. 140.2. 140.3) of the reference signatures is 
computed numerically. The most characteristic sub- 
sat of such properties Is selected and statistically 
analyzed to obtain a set of parameters for signature 
verification- An entrant signature Is subsequently ac- 
cepted or rejected (160. 170) based on its confor- 
mity to the parameters. An accepted signature is 
optionally passed along to a higher-ievel verification 
process. When a signature is accepted by the high- 
est-level verification process, responsive means 
(050) are activated.- resulting in the entrant's access 
to a system. 
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